code wiki / _hdl_build / nx_hr_admin_gate.nx
nx_hr_admin_gate.nx
buildroot/runtime/_hdl_build/nx_hr_admin_gate.nx
about
nx_hr_admin_gate.nx -- referee for NISHI HR ADMIN (the admin-operations layer). PROVES, each with a negative
control / leak-check:
owner enrolled active -> is_superadmin=1 ; member invited -> is_invited=1 but NO access (resolve 0) and
NOT superadmin (leak-check) ; claim invited -> active@level, then NOT invited (re-register blocked) ;
re-claim = no-op (idempotent) ; suspend -> 0 ; REALM ISOLATION (same handle "brad", different realm =
different cred_id, an invite in one realm is invisible in the other) ; provision-by-handle id == derived id ;
deny-by-default for unknown handles ; roster counts (active vs invited).
GREEN iff every row matches. Durable -> knowledge/status/hr_admin_gate.log.
dependencies 3 imports · 0 importers
imports: nx_hr_admin.nxnx_g_puts_lib.nxnx_syscalls.nx
imported by: nobody (leaf or entry point)
call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown
structs
| none |
consts
| none |
functions
| 13 | func g_num(v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m;sys_write(1,"-" as *u8,1)}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(1,bb,k); return 0 } |
| 14 | func g_w(fd: i64, s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(fd,s,n); return 0 } |
| 15 | func g_wn(fd: i64, v: i64) -> i64 { let bb: *u8=sys_mmap(28); var m: i64=v; if m<0{m=0-m}; let t: *u8=sys_mmap(28); var k: i64=0; if m==0{t[0]=(48 as u8);k=1}; while m>0{t[k]=((48+(m%10)) as u8);m=m/10;k=k+1}; var i: i64=0; while i<k{bb[i]=t[k-1-i];i=i+1}; sys_write(fd,bb,k); return 0 } |
| 16 | func g_mkpfx(base: *u8, ms: i64, out: *u8) -> i64 { var o: i64=0; while base[o]!=(0 as u8){out[o]=base[o];o=o+1} let t: *u8=sys_mmap(28); var m: i64=ms; var k: i64=0; if m==0{t[0]=48 as u8;k=1} while m>0{t[k]=(48+(m%10)) as u8;m=m/10;k=k+1} var z: i64=k-1; while z>=0{out[o]=t[z];o=o+1;z=z-1} out[o]=0 as u8; return o } |
| 17 | func g_streq(a: *u8, b: *u8) -> i64 { var i: i64=0; while 1==1 { let ca: i64=a[i] as i64; let cb: i64=b[i] as i64; if ca!=cb { return 0 } if ca==0 { return 1 } i=i+1 } return 1 } called by 1: main |
| 18 | func chk(got: i64, want: i64, label: *u8) -> i64 |
| 24 | func main() -> i64 |